NoSQL error-based injection

This post outlines a fast, error-based NoSQL injection technique for MongoDB: instead of slow Boolean/regex guessing, an attacker injects JavaScript into `$where` (or via syntax injection) to execute `throw new Error(JSON.stringify(this))`, causing the database to return full documents in error messages; it demonstrates payload construction, handling syntax to safely insert the throw, iterating through records by excluding known users or comparing `_id`, and shows alternatives using `$expr`/`$function` and type-cast errors (e.g., `$toInt`) for data exfiltration when application error messages are exposed.